Refer to the exhibits.
Examine the firewall policy configuration and SSID settings.
An administrator has configured a guest wireless network on FortiGate using the external captive portal. The administrator has verified that the external captive portal URL is correct. However, wireless users are not able to see the captive portal login page.
Given the configuration shown in the exhibit and the SSID settings, which configuration change should the administrator make to fix the problem?
The administrator should include the wireless client subnet range in the Exempt Source section. This ensures that traffic from the wireless clients is allowed to access the external captive portal, enabling them to see the login page. This configuration bypasses the normal authentication process for the captive portal web traffic, which is essential for the users to be able to access and view the captive portal login page.
Using B will ignore the portal entrance,The correct setting should be to set the source of ID11 policy to the Guest.portal Group
Incorrect, The portal cannot be seen, we havent reached authentication yet, the portal address needs to be exempt, so it can be seen first. B is the Answer
study guide page 363 - if using external captive portal configure policy and exempt web traffic to external captive portal
Answer B Study Guide P363
study guide p. 363
plus page 364!
Revert! C is right as per page 365 study guide! Read pages 363-365!
Which study guide are you guys referring to in the discussion? I've reviewed the guide available on the Fortinet Training page for the online LAN Edge course and the page numbers don't line up.
just a note guys - I wrote today and got only about 15 questions from this guide. had to figure all the other questions out - a lot of FortiAuthenticator and wireless questions were new.